// DIGITAL DEFENSE ARCHITECT \\

Michael Nikitaidis. SOC Analyst & Secure Infrastructure Specialist.

Bridging the gap between **proactive threat defense** and the construction of **resilient, cloud-based web platforms.**

Analyze My SOC Capabilities View Secure Web Services

🛡️ Part 1: Cybersecurity Operations (SOC, SIEM, BTL1)

Proactive defense, rapid detection, and efficient threat resolution.

Certifications & Validation

**Blue Team Level 1 (BTL1)** **Practical, hands-on defense** including digital forensics, threat intelligence, and structured incident response.
**Splunk User** **Foundational competence** in searching, navigating, and building reports and dashboards within the **Splunk** platform.
**IBM QRadar** **Proficiency in enterprise SIEM** for log collection, correlation, vulnerability management, and incident investigation.

🚨

Incident Detection & Triage

Leveraging **Splunk** and **IBM QRadar**, I specialize in **real-time monitoring** and alert correlation to ensure critical incidents are escalated immediately to minimize **MTTD**.

Tool Proficiency:

SIEM Platforms (Splunk, QRadar, Sentinel), EDR Tools, Log Analysis.

🎯

Threat Hunting (BTL1 Certified)

My **BTL1** skills validate my ability to perform initial **digital forensics**, use **Threat Intelligence (TI)**, and map attacker tactics to **MITRE ATT&CK** to find hidden threats.

Key Skills:

MITRE ATT&CK Mapping, IOC Validation, Forensic Analysis, Wireshark.

🐍

Automation & SOAR

I develop automation scripts using **Python** and **PowerShell** to automate repetitive tasks like alert enrichment and initial system containment, driving efficiency towards a **SOAR** model.

Tool Proficiency:

Python, PowerShell, API Integration, Workflow Development.

☁️ Part 2: Secure Web Architecture & Cloud Resilience

Building highly resilient web platforms secured at the server and application layers.

Laptop displaying various secure web platforms and e-commerce designs

⚙️

Secure Cloud Platforms

Experience securing cloud environments by managing robust **IAM policies**, configuring secure networking, and auditing configuration changes in major platforms.

Focus:

AWS, Azure, IAM Hardening, Security Configuration Audits.

📧

Linux & Secure Mail Servers

Deep knowledge of **Linux** administration. I expertly configure **Mail Servers** with critical protocols like **SPF, DKIM, and DMARC** to prevent email spoofing and ensure message integrity.

Tool Proficiency:

KeyHelp/cPanel, Ubuntu/CentOS, Postfix/Exim, DMARC/DKIM.

🔒

WordPress & App Security

I build and maintain **WordPress** sites that are secure by design. I enforce **OWASP Top 10** standards, configure **Web Application Firewalls (WAFs)**, and manage secure data storage policies.

Key Skills:

WordPress Hardening, WAF Rule Implementation, Database Hardening.

💼 Case Study Spotlight: Zero-Day Response

Demonstrating rapid execution and strategic hardening under pressure.

INCIDENT TIMELINE

Rapid execution from detection to remediation.

The Challenge:

Detection of early reconnaissance attempts following the public announcement of a high-severity zero-day vulnerability affecting a core component of a client's web infrastructure.

My Response Process:

  1. **Immediate Containment (5 min):** Quickly deployed temporary compensating controls and block rules via **WAF** at the network edge to mitigate the vulnerability until a patch was available.
  2. **Deep Analysis (30 min):** Conducted log analysis across EDR and server logs to verify the exploit had not been successfully used *before* the block was put in place.
  3. **Hardening & Prevention:** Applied vendor patches and immediately implemented a permanent **SIEM signature** and **WAF rule** tailored to the exploit's specific payload and behavior.

Outcome: Full prevention of a catastrophic data breach, demonstrating rapid execution and proactive hardening.

Ready to Build a Resilient Future?

Let's discuss how my blend of **SOC Analysis** and **Secure Infrastructure** expertise can protect and optimize your digital assets.

Get in Touch

Email: **michael@nikitaidis.eu**

Connect on LinkedIn